I think that for professional hackers anything is possible. But in most cases scammers don't even need to hack anything. People make mistakes themselves and do not monitor their safety.